RSS 생중계

An anonymous reader quotes a report from Axios: President Trump quietly took a red pen to much of the Biden administration's cyber legacy in a little-noticed move late Friday. Under an executive order signed just before the weekend, Trump is tossing out some of the major touchstones of Biden's cyber policy legacy -- while keeping a few others. The order preserves efforts around post-quantum cryptography, advanced encryption standards, and border gateway protocol security, along with the Cyber Trust Mark program -- an Energy Star-type labeling initiative for consumer smart devices. But hallmark programs tied to software bills of materials, zero-trust implementation, and space contractor cybersecurity requirements have been either rescinded or left in limbo. The new executive order amends both the Biden cyber executive order signed in January and an Obama administration order. Each of the following Biden-era programs is now out the door or significantly rolled back: - A broad requirement for federal software vendors to provide a software bill of materials - essentially an ingredient list of code components - is gone. - Biden-era efforts to encourage federal agencies to accept digital identity documents and help states develop mobile driver's licenses were revoked. - Several AI cybersecurity research mandates, including those focused on AI-generated code security and AI-driven patch management pilots, have been scrapped or deprioritized. - The requirement that software contractors formally attest they followed secure development practices - and submit those attestations to a federal repository - has been cut. Instead, the National Institute of Standards and Technology will now coordinate a new industry consortium to review software security guidelines.

Read more of this story at Slashdot.

Connor Jones reports via The Register: Security researchers managed to access the live feeds of 40,000 internet-connected cameras worldwide and they may have only scratched the surface of what's possible. Supporting the bulletin issued by the Department of Homeland Security (DHS) earlier this year, which warned of exposed cameras potentially being used in Chinese espionage campaigns, the team at Bitsight was able to tap into feeds of sensitive locations. The US was the most affected region, with around 14,000 of the total feeds streaming from the country, allowing access to the inside of datacenters, healthcare facilities, factories, and more. Bitsight said these feeds could potentially be used for espionage, mapping blind spots, and gleaning trade secrets, among other things. Aside from the potential national security implications, cameras were also accessed in hotels, gyms, construction sites, retail premises, and residential areas, which the researchers said could prove useful for petty criminals. Monitoring the typical patterns of activity in retail stores, for example, could inform robberies, while monitoring residences could be used for similar purposes, especially considering the privacy implications. "It should be obvious to everyone that leaving a camera exposed on the internet is a bad idea, and yet thousands of them are still accessible," said Bitsight in a report. "Some don't even require sophisticated hacking techniques or special tools to access their live footage in unintended ways. In many cases, all it takes is opening a web browser and navigating to the exposed camera's interface." HTTP-based cameras accounted for 78.5 percent of the total 40,000 sample, while RTSP feeds were comparatively less open, accounting for only 21.5 percent. To protect yourself or your company, Bitsight says you should secure your surveillance cameras by changing default passwords, disabling unnecessary remote access, updating firmware, and restricting access with VPNs or firewalls. Regularly monitoring for unusual activity also helps to prevent your footage from being exposed online.

Read more of this story at Slashdot.

Starbucks is piloting a generative AI assistant called "Green Dot Assist" to streamline barista tasks and improve service speed, with plans for a broader rollout in fiscal 2026. The assistant is built on Microsoft Azure's OpenAI platform. CNBC reports: Instead of flipping through manuals or accessing Starbucks' intranet, baristas will be able to use a tablet behind the counter equipped with Green Dot Assist to get answers to a range of questions, from how to make an iced shaken espresso to troubleshooting equipment errors. Baristas can either type or verbally ask their queries in conversational language. As the AI assistant evolves, Starbucks has even bigger plans for its next generation. Those ideas include automatically creating a ticket with IT for equipment issues or generating suggestions for a substitute when a barista calls out of work, according to [Starbucks Chief Technology Officer Deb Hall Lefevre]. [...] Lefevre said tenured baristas have been learning to use the new POS in as little as an hour. Plus, the technology can offer personalized recommendations and loyal customers' repeat orders, helping Starbucks achieve the personalized touch it's looking to bring back to its cafes. "It's just another example of how innovation technology is coming into service of our partners and making sure that we're doing all we can to simplify the operations, make their jobs just a little bit easier, maybe a little bit more fun, so that they can do what they do best," Lefevre told CNBC.

Read more of this story at Slashdot.

An anonymous reader shares a blog post from Google: Today, we're bringing you Android 16, rolling out first to supported Pixel devices with more phone brands to come later this year. This is the earliest Android has launched a major release in the last few years, which ensures you get the latest updates as soon as possible on your devices. Android 16 lays the foundation for our new Material 3 Expressive design, with features that make Android more accessible and easy to use.

Read more of this story at Slashdot.

Bluesky's user engagement has fallen roughly 50% since peaking in mid-November, according to a recent Pew Research Center analysis, as progressive groups' efforts to migrate users from Elon Musk's X platform show signs of failure. The research found that while many news influencers maintain Bluesky accounts, two-thirds post irregularly compared to more than 80% who still post daily to X. A Washington Post columnist tries to make sense of it: The people who have migrated to Bluesky tend to be those who feel the most visceral disgust for Musk and Trump, plus a smattering of those who are merely curious and another smattering who are tired of the AI slop and unregenerate racism that increasingly pollutes their X feeds. Because the Musk and Trump haters are the largest and most passionate group, the result is something of an echo chamber where it's hard to get positive engagement unless you're saying things progressives want to hear -- and where the negative engagement on things they don't want to hear can be intense. That's true even for content that isn't obviously political: Ethan Mollick, a professor at the University of Pennsylvania's Wharton School who studies AI, recently announced that he'll be limiting his Bluesky posting because AI discussions on the platform are too "fraught." All this is pretty off-putting for folks who aren't already rather progressive, and that creates a threefold problem for the ones who dream of getting the old band back together. Most obviously, it makes it hard for the platform to build a large enough userbase for the company to become financially self-sustaining, or for liberals to amass the influence they wielded on old Twitter. There, they accumulated power by shaping the contours of a conversation that included a lot of non-progressives. On Bluesky, they're mostly talking among themselves.

Read more of this story at Slashdot.

The World Bank sharply reduced its global economic growth forecast for 2025 to 2.3% from 2.7%, warning that the current decade is on track to become the weakest for the global economy since the 1960s. The Washington-based lender attributed the downgrade to mounting costs from "international discord -- about trade, in particular," as Donald Trump's tariff policies create unprecedented uncertainty. The revised forecast would mark the slowest growth rate outside full-blown recessions since 2008. Even with a modest recovery to 2.4% expected in 2026, the bank characterized the outlook as merely "tepid." Chief economist Indermit Gill said "outside of Asia, the developing world is becoming a development-free zone." Growth in developing economies has steadily declined from 6% annually in the 2000s to 5% in the 2010s, now falling below 4% in the 2020s. The bank said that "many of the forces behind the great economic miracle of the last 50 years" have reversed, with more than half of low-income countries either in debt distress or at high risk.

Read more of this story at Slashdot.

AI is speeding up the work of America's intelligence services, Director of National Intelligence Tulsi Gabbard said Tuesday. From a report: Speaking to a technology conference, Gabbard said AI programs, when used responsibly, can save money and free up intelligence officers to focus on gathering and analyzing information. The sometimes slow pace of intelligence work frustrated her as a member of Congress, Gabbard said, and continues to be a challenge. AI can run human resource programs, for instance, or scan sensitive documents ahead of potential declassification, Gabbard said. Her office has released tens of thousands of pages of material related to the assassinations of President John F. Kennedy and his brother, New York Sen. Robert F. Kennedy, on the orders of President Donald Trump. Experts had predicted the process could take many months or even years, but AI accelerated the work by scanning the documents to see if they contained any material that should remain classified, Gabbard said during her remarks at the Amazon Web Services Summit in Washington. "We have been able to do that through the use of AI tools far more quickly than what was done previously -- which was to have humans go through and look at every single one of these pages," Gabbard said.

Read more of this story at Slashdot.

Jean Baptiste Lallement, a member of Canonical's desktop team, has announced that Ubuntu will drop support for GNOME on X11 in the 25.10 ("Questing Quokka") release set for October. GNOME plans to remove X11 support in GNOME 49, which is scheduled for September, so Ubuntu is looking to be proactive:

Ubuntu 25.10 is the last interim release before our next LTS (Ubuntu 26.04). By moving now, we give developers and users a full cycle to adapt before the next LTS, align with GNOME 49 and reduce fragmentation while simplifying our support matrix heading into the LTS.

Fedora decided in early May to drop X11 support for GNOME in Fedora 43, which is also due in October.

A NASA-backed project using observations from the James Webb Space Telescope (JWST) has released more than 1.5 TB of data for open science, offering the largest view deep into the universe available to date. From a report: The Cosmic Evolution Survey (COSMOS), a joint project from the University of California, Santa Barbara and Rochester Institute of Technology, has launched a searchable dataset for budding astrophysics enthusiasts worldwide. As well as a catalog of galaxies, the dataset includes an interactive viewer that users can search for images of specific objects or click them to view their properties, covering approximately 0.54 square degrees of sky with the Near Infrared Camera (NIRCam) and a 0.2 square degree area with the Mid Infrared Instrument (MIRI). Although the raw data was already publicly available to the science community, the aim of the COSMOS-Web project was to make it more usable for other scientists.

Read more of this story at Slashdot.

BrianFagioli writes: Ubuntu 25.10, known as Questing Quokka, is taking a big turn under the hood. Canonical has dropped support for the GNOME desktop running on Xorg. Starting with this release, the default Ubuntu session now uses Wayland only. Yes, folks, there's no longer an option to log into GNOME on Xorg.

Read more of this story at Slashdot.

Apple's latest AI models continue to lag behind competitors, according to the company's own benchmark testing it disclosed this week. The tech giant's newest "Apple On-Device" model, which runs locally on iPhones and other devices, performed only "comparably" to similarly-sized models from Google and Alibaba in human evaluations of text generation quality -- not better, despite being Apple's most recent release. The performance gap widens with Apple's more powerful "Apple Server" model, designed for data center deployment. Human testers rated it behind OpenAI's year-old GPT-4o in text generation tasks. In image analysis tests, evaluators preferred Meta's Llama 4 Scout model over Apple Server, a particularly notable result given that Llama 4 Scout itself underperforms leading models from Google, Anthropic, and OpenAI on various benchmarks.

Read more of this story at Slashdot.

Cisco is updating its networking and security products to make AI networks speedier and more secure, part of a broader push to capitalize on the AI spending boom. From a report: A new generation of switches -- networking equipment that links computer systems -- will offer a 10-fold improvement in performance, the company said on Tuesday. That will help prevent AI applications from suffering bottlenecks when transferring data, Cisco said. Networking speed has become a bigger issue as data center operators try to manage a flood of AI information -- both in the cloud and within the companies' own facilities. Slowdowns can hinder AI models, Cisco President and Chief Product Officer Jeetu Patel said in an interview. That applies to the development phase -- known as training -- and the operation of the models, a stage called inference. A massive build-out of data centers has made Cisco more relevant, he said. "AI is going to be network-bound, both on training and inference," Patel said. Having computer processors sit idle during training because of slow networks is "just throwing away money."

Read more of this story at Slashdot.

A group of 20 internationally renowned scientists have issued a strong warning against attempts to narrow the definition of "forever chemicals" in what they describe as a politically or economically motivated effort to weaken regulation of the potentially harmful chemicals. From a report: Per- and polyfluoroalkyl substances (Pfas) are a large group of synthetic chemicals used for their oil-, water- and stain-resistant properties in a range of consumer and industrial products from waterproof clothing and non-stick cookware to firefighting foams and electronics. Their molecular structure makes them resistant to degradation, earning them the nickname "forever chemicals." In the last few years there has been growing awareness of the problems associated with Pfas, and a push for more stringent regulation, resulting in the banning of certain forms. A group of scientists are now raising the alarm about efforts, including by some individuals and groups in the International Union of Pure and Applied Chemistry (IUpac), to narrow the current international definition of Pfas in ways that could exclude certain chemical subgroups.

Read more of this story at Slashdot.

The iov_iter interface is used to describe and iterate through buffers in the kernel. David Howells led a combined storage and filesystem session at the 2025 Linux Storage, Filesystem, Memory Management, and BPF Summit (LSFMM+BPF) to discuss ways to improve iov_iter. His topic proposal listed a few different ideas including replacing some iov_iter types and possibly allowing mixed types in chains of iov_iter entries; he would like to make the interface itself and the uses of iov_iter in the kernel better.

The Class of 2025 is encountering the worst entry-level job market in years with unemployment among recent degree-holders aged 22 to 27 reaching 5.8% this spring -- the highest level in approximately four years and well above the national average. According to Federal Reserve Bank of New York data, 85% of the unemployment rate increase since mid-2023 stems from new labor market entrants struggling to find work. Corporate hiring freezes implemented under threats of President Trump's tariffs, combined with AI replacing traditional entry-level positions, have severely constrained opportunities for new graduates. More than 60% of executives surveyed on LinkedIn indicate that AI will eventually assume tasks currently assigned to entry-level employees, particularly mundane and manual roles. The impact varies significantly by major, with computer engineering graduates -- once highly sought-after -- now facing a 7.5% unemployment rate, the third-highest among recent graduates. Employment in computer science and mathematical jobs for those under 27 has dropped 8% since 2022, even as it grew 0.8% for older workers.

Read more of this story at Slashdot.

The Linux kernel famously scales from the smallest of systems to massive servers with thousands of CPUs. It was not always that way, though; the initial version of the kernel could only manage a single processor. That limitation was lifted, obviously, but single-processor machines have always been treated specially in the scheduler. That longstanding situation may soon come to an end, though, if this patch series from Ingo Molnar makes it upstream.

OpenAI plans to add Alphabet's Google cloud service to meet its growing needs for computing capacity, Reuters reported Tuesday, marking a surprising collaboration between two prominent competitors in the AI race. From the report: The deal, which has been under discussion for a few months, was finalized in May, one of the sources added. It underscores how massive computing demands to train and deploy AI models are reshaping the competitive dynamics in AI, and marks OpenAI's latest move to diversify its compute sources beyond its major supporter Microsoft, including its high-profile Stargate data center project. It is a win for Google's cloud unit, which will supply additional computing capacity to OpenAI's existing infrastructure for training and running its AI models, sources said, who requested anonymity to discuss private matters. The move also comes as OpenAI's ChatGPT poses the biggest threat to Google's dominant search business in years, with Google executives recently saying that the AI race may not be winner-take-all.

Read more of this story at Slashdot.

The Open Invention Network (OIN) is celebrating its 20th anniversary.

The central feature of the OIN community is a patent cross-license that covers core Open Source functionality and expands in parallel with the growth of Open Source technology. As growth in Open Source has accelerated, OIN has proactively expanded the scope of the OIN license's benefit by including more than 4,500 software components and platforms in its Linux System definition, which comprises the list of Open Source code and associated functionality in OIN's patent cross-license.

LWN's first look at OIN was this article by Pamela Jones in late 2005.

The 6.15.2, 6.14.11, and 6.12.33 stable kernel updates have been released; each contains a relatively small set of important fixes.

Note that this is the end of the line for the 6.14.x updates; Greg Kroah-Hartman explains the timing of this move:

If you notice, this has happened a bit more "early" than previous end-of-life announcements. Normally, after -rc1 is out there is a TON of stable patches happening due to the changes that come into the merge-window that were marked for stable backports but didn't get into Linus's release before -final. As some people have objected to this large influx being added to a stable kernel that is just about to go end-of-life, let's try marking this end-of-life a bit earlier to see how it goes.

Security updates have been issued by Debian (python-django), Fedora (krb5), Mageia (cockpit, golang, kernel, and kernel-linus), SUSE (augeas, go1.23, go1.24, iputils, libwebp, transfig, and xen), and Ubuntu (amd64-microcode, apport, linux-azure, linux-azure, linux-azure-4.15, linux-azure-fips, linux-raspi, systemd, and tomcat).